How did keys get stolen

My Coinbase Wallet was emptied. I had stored my keys in a password manager that requires facial recognition to access.

1) Why doesn't Coinbase flag when a wallet is accessed from a different device with a new IP address and attempts are made to withdraw all the crypto?

2) I’m afraid Coinbase won’t let me back into my regular account if I factory reset my phone and laptop since my biometric passkey will have to be recreated as part of factory reset. Anyone familiar with this situation?